Suppose you are the director of internal audit and executive management has asked you to work with the chief information officer to evaluate the security over information technology. Write a report, outlining the process of an effective review of security and controls over information technology. Distinguish between threats and vulnerabilities and provide examples that illustrate these distinctions. Include a plan for business continuity.